From 63768dff180059be44f1c4fa418b8f378e8a8dde Mon Sep 17 00:00:00 2001
From: Julien Veyssier <julien-nc@posteo.net>
Date: Mon, 30 Mar 2026 12:29:10 +0200
Subject: [PATCH] remove ApiController and keep OcsApiController

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
---
 appinfo/routes.php               |  3 --
 lib/Controller/ApiController.php | 85 --------------------------------
 2 files changed, 88 deletions(-)
 delete mode 100644 lib/Controller/ApiController.php

diff --git a/appinfo/routes.php b/appinfo/routes.php
index ad005f873..faf0ae16b 100644
--- a/appinfo/routes.php
+++ b/appinfo/routes.php
@@ -17,9 +17,6 @@
 		['name' => 'login#singleLogoutService', 'url' => '/sls', 'verb' => 'GET'],
 		['name' => 'login#backChannelLogout', 'url' => '/backchannel-logout/{providerIdentifier}', 'verb' => 'POST'],
 
-		['name' => 'api#createUser', 'url' => '/user', 'verb' => 'POST'],
-		['name' => 'api#deleteUser', 'url' => '/user/{userId}', 'verb' => 'DELETE'],
-
 		['name' => 'id4me#showLogin', 'url' => '/id4me', 'verb' => 'GET'],
 		['name' => 'id4me#login', 'url' => '/id4me', 'verb' => 'POST'],
 		['name' => 'id4me#code', 'url' => '/id4me/code', 'verb' => 'GET'],
diff --git a/lib/Controller/ApiController.php b/lib/Controller/ApiController.php
deleted file mode 100644
index 28aaa6c72..000000000
--- a/lib/Controller/ApiController.php
+++ /dev/null
@@ -1,85 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-/**
- * SPDX-FileCopyrightText: 2022 Nextcloud GmbH and Nextcloud contributors
- * SPDX-License-Identifier: AGPL-3.0-or-later
- */
-
-namespace OCA\UserOIDC\Controller;
-
-use OCA\UserOIDC\AppInfo\Application;
-use OCA\UserOIDC\Db\UserMapper;
-use OCP\AppFramework\Controller;
-use OCP\AppFramework\Http;
-use OCP\AppFramework\Http\Attribute\NoCSRFRequired;
-use OCP\AppFramework\Http\Attribute\OpenAPI;
-use OCP\AppFramework\Http\DataResponse;
-use OCP\Files\IRootFolder;
-use OCP\Files\NotPermittedException;
-use OCP\IRequest;
-use OCP\IUserManager;
-
-#[OpenAPI(scope: OpenAPI::SCOPE_IGNORE)]
-class ApiController extends Controller {
-
-	public function __construct(
-		IRequest $request,
-		private IRootFolder $root,
-		private UserMapper $userMapper,
-		private IUserManager $userManager,
-	) {
-		parent::__construct(Application::APP_ID, $request);
-	}
-
-	#[NoCSRFRequired]
-	public function createUser(
-		int $providerId,
-		string $userId,
-		?string $displayName = null,
-		?string $email = null,
-		?string $quota = null,
-	): DataResponse {
-		$backendUser = $this->userMapper->getOrCreate($providerId, $userId);
-		$user = $this->userManager->get($backendUser->getUserId());
-
-		// Update display name if provided and different
-		if ($displayName !== null && $displayName !== $backendUser->getDisplayName()) {
-			$backendUser->setDisplayName($displayName);
-			$this->userMapper->update($backendUser);
-		}
-
-		// Update email if provided
-		if ($email !== null) {
-			$user->setSystemEMailAddress($email);
-		}
-
-		// Update quota if provided
-		if ($quota !== null) {
-			$user->setQuota($quota);
-		}
-
-		// Copy skeleton files to user folder
-		$userFolder = $this->root->getUserFolder($user->getUID());
-		try {
-			\OC_Util::copySkeleton($user->getUID(), $userFolder);
-		} catch (NotPermittedException $e) {
-			// Silently ignore for read-only users
-		}
-
-		return new DataResponse(['user_id' => $user->getUID()]);
-	}
-
-	#[NoCSRFRequired]
-	public function deleteUser(string $userId): DataResponse {
-		$user = $this->userManager->get($userId);
-
-		if ($user === null || $user->getBackendClassName() !== Application::APP_ID) {
-			return new DataResponse(['message' => 'User not found'], Http::STATUS_NOT_FOUND);
-		}
-
-		$user->delete();
-		return new DataResponse(['user_id' => $userId], Http::STATUS_OK);
-	}
-}